Mandriva Linux Security Advisory : openldap (MDVSA-2011:055)

Multiple vulnerabilities has been identified and fixed in openldap : chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass...

[ MDVSA-2011:055 ] openldap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:055 http://www.mandriva.com/security/ Package : openldap Date : March 30, 2011 Affected: 2009.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been identified and fixed in openldap:...

Mandriva Update for php MDVSA-2011:052 (php)

Check for the Version of php OpenVAS Vulnerability Test Mandriva Update for php MDVSA-2011:052 php Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Mandriva Update for pidgin MDVSA-2011:050 (pidgin)

Check for the Version of pidgin OpenVAS Vulnerability Test Mandriva Update for pidgin MDVSA-2011:050 pidgin Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Update for vsftpd MDVSA-2011:049 (vsftpd)

Check for the Version of vsftpd OpenVAS Vulnerability Test Mandriva Update for vsftpd MDVSA-2011:049 vsftpd Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Mandriva Linux Security Advisory : vsftpd (MDVSA-2011:049)

A vulnerability was discovered and corrected in vsftpd : The vsffilenamepassesfilter function in ls.c in vsftpd before 2.3.3 allows remote authenticated users to cause a denial of service CPU consumption and process slot exhaustion via crafted glob expressions in STAT commands in multiple FTP...

Mandriva Linux Security Advisory : proftpd (MDVSA-2011:047)

A vulnerability was discovered and corrected in proftpd : Integer overflow in the modsftp aka SFTP module in ProFTPD 1.3.3d and earlier allows remote attackers to cause a denial of service memory consumption leading to OOM kill via a malformed SSH message CVE-2011-1137. Additionally for Mandriva...

Mandriva Linux Security Advisory : krb5 (MDVSA-2011:048)

A vulnerability was discovered and corrected in krb5 : The MIT Kerberos 5 Key Distribution Center KDC daemon is vulnerable to a double-free condition if the Public Key Cryptography for Initial Authentication PKINIT capability is enabled, resulting in daemon crash or arbitrary code execution which...

Mandriva Linux Security Advisory : pure-ftpd (MDVSA-2011:046)

A security flaw was discovered in pure-ftpd which allows plaintext command injection over TLS similar to CVE-2011-0411. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149 productsid=490...

Mandriva Linux Security Advisory : postfix (MDVSA-2011:045)

A security flaw was discovered in postfix which allows plaintext command injection with SMTP sessions over TLS CVE-2011-0411. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more: http://store.mandriva.com/productinfo.php?cPath=149...

Mandriva Update for firefox MDVA-2011:008 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVA-2011:008 firefox Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Mandriva Update for wireshark MDVSA-2011:044 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2011:044 wireshark Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Update for mozilla-thunderbird MDVSA-2011:042 (mozilla-thunderbird)

Check for the Version of mozilla-thunderbird OpenVAS Vulnerability Test Mandriva Update for mozilla-thunderbird MDVSA-2011:042 mozilla-thunderbird Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for mozilla-thunderbird MDVSA-2011:042 (mozilla-thunderbird)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for libtiff MDVSA-2011:043 (libtiff)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

MDVA-2011:010 : djvulibre

Various problems were discovered with the DJVULibre firefox browser-plugin: Browser plugin from dejavulibre is obsolete and was causing browser crashes when viewing DJVU content. This browser plugin is now disabled, mozilla-plugin-dejavu should now be used. Djvulibre crashed when converting DJVU...

MDVA-2011:011 : mono-tools

A dependency problem was discovered with mono-tools in that it required a much older version of libxulrunner than the current latest one, this advisory addresses this problem. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...

Mandriva Linux Security Advisory : wireshark (MDVSA-2011:044)

This advisory updates wireshark to the latest version 1.2.15, fixing several security issues : Wireshark 1.5.0, 1.4.3, and earlier frees an uninitialized pointer during processing of a .pcap file in the pcap-ng format, which allows remote attackers to cause a denial of service memory corruption o...

Mandriva Linux Security Advisory : libtiff (MDVSA-2011:043)

A buffer overflow was discovered in libtiff which allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted TIFF image with CCITT Group 4 encoding CVE-2011-0192. Additionally it was discovered that the fixes for CVE-2009-2347 and CVE-2010-2065...

MDVA-2011:008 : firefox

This is a bugfix release that upgrades firefox to the latest version 3.6.15 due to issues where some Java applets would fail to load. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:...